The requirement is to be able to comprehend psychology. One must find out how workers think, but above all one needs to understand how attackers think. Once one has that in their belt, they will have the knowledge to take charge and prevent data leaks and cyberattacks.
 
By comprehending how one thinks and behaves- and why - one can be ready to develop their security position.
 
Some of the questions that need to be considered are:
 
●      What equity needs to be protected and who can obtain it.
●      What safety equipment is already in use and how they influence the participation of the users.
●      How many times do you interact in cybersecurity classes with people and what do classes have to do with them?
●      Figuring out if one works with outside companies to run phishing campaigns or social engineering attacks
●      What personal devices are present in the work area such as tablets, smartphones, etc.
●      Password guidelines and if workers follow them
●      Attitude towards cybersecurity in a business.